Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: PNM/lHnIt4pLizouX+HpBowkRx4zGa2J+ROG0oJyoWY=
Subject key identifier: 4A:A9:1B:A2:E1:AE:54:7F:56:7A:84:C9:4E:82:F0:42:AD:DC:20:1F
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019A4DAADDD6C386B164D87747E79960C0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 16AD
Signing time: Tue 04 Nov 2025 07:00:34 +0000
Manifest this update: Tue 04 Nov 2025 07:00:34 +0000
Manifest next update: Wed 05 Nov 2025 07:00:34 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: sQnoGu33EHw9GTw8H4zJV+9BLIJG5zl6E11iiPby4ec=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:dd:d6:c3:86:b1:64:d8:77:47:e7:99:60:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Nov 4 07:00:34 2025 GMT
Not After : Nov 5 07:00:34 2025 GMT
Subject: CN=4aa91ba2e1ae547f567a84c94e82f042addc201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:57:6b:28:9b:d3:61:bd:09:aa:73:a1:b6:
55:8b:2f:20:e8:1e:72:ce:0e:cf:36:84:bc:db:83:
9b:56:3f:e5:bc:30:87:d2:5a:55:77:73:9a:2e:e5:
c6:a9:f4:65:24:da:c3:1e:3a:9e:94:00:67:d5:10:
cc:b6:99:39:42:89:10:a4:29:c9:73:78:74:79:80:
60:04:91:1c:3f:85:4a:05:f7:ff:83:4d:5d:0e:98:
7b:23:48:9e:28:ef:30:55:df:da:71:c4:63:4c:98:
f0:2b:7b:a6:14:b5:b1:fd:21:b3:46:ba:83:11:67:
03:e2:c0:fa:8d:72:62:65:8e:b0:40:e5:3e:80:58:
c0:54:30:e0:00:2b:fa:95:43:37:20:ff:a9:b9:fc:
b2:ed:45:1e:22:29:c8:53:ce:1a:88:e2:1e:0e:d1:
1a:f5:3c:e2:08:63:03:47:11:55:cc:64:70:a7:3c:
18:69:b1:22:4e:da:98:e6:b6:57:42:f7:50:e4:93:
d2:6f:2e:b9:77:ec:51:0c:c0:a3:43:3b:af:90:1e:
d7:13:d1:ff:7a:61:ad:46:15:d8:45:91:86:d2:54:
97:ac:2e:e9:2a:84:81:df:02:c3:7d:ac:62:09:35:
1e:84:90:0c:9b:75:89:51:ec:60:0b:19:93:ca:99:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:1B:A2:E1:AE:54:7F:56:7A:84:C9:4E:82:F0:42:AD:DC:20:1F
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:58:70:94:18:48:cd:ff:29:23:a0:0f:ce:e6:7b:3d:b9:86:
a8:f3:dc:8b:b5:ed:a8:6b:69:05:ad:1e:2f:d6:d1:29:4c:10:
f3:59:7e:5b:bc:36:f0:30:98:50:ee:ff:3e:32:ce:4a:47:76:
a5:73:e3:81:d3:08:2d:2a:4c:53:a7:81:4c:30:87:ed:bf:0e:
29:99:0e:d7:eb:33:62:2a:f6:19:54:61:cf:53:92:c2:ab:13:
b5:f2:e9:09:42:06:fc:60:f2:24:32:b1:24:00:f0:f2:b5:2e:
aa:9e:3f:54:f4:3b:dd:6e:d2:23:8a:c6:15:c6:a5:6d:03:10:
a5:03:24:24:47:3a:64:f1:ee:7e:2a:8c:2a:fa:1b:1b:7e:07:
d9:5d:5d:c5:96:53:07:fc:5f:3e:7f:07:4a:f5:92:87:90:78:
32:2c:f1:c7:6b:1d:b0:ab:1d:41:c3:e5:c7:1d:cb:ab:06:4e:
12:c4:f1:6e:80:f6:a5:01:c8:88:63:aa:49:ab:c6:a2:57:13:
40:24:76:51:10:aa:54:a9:33:c7:7a:01:20:eb:6a:d8:8d:58:
7b:80:62:92:75:03:f3:84:ec:18:17:1c:66:02:92:32:0e:03:
1a:a8:52:70:7b:71:f4:bf:b4:57:72:de:df:95:d4:70:62:9e:
df:b2:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:08 2025 by rpki-client